test: Add network policy enforcement tests

Add comprehensive NetworkPolicy tests for kube-apiserver and
kube-apiserver-operator namespaces. Tests verify policy creation,
reconciliation, and enforcement including default-deny and allow
rules patterns.

Signed-off-by: Kaleemullah Siddiqui <ksiddiqu@redhat.com>

Author: kaleemsiddiqu

cmd/cluster-kube-apiserver-operator-tests-ext/main.go

@@ -66,7 +66,7 @@ func prepareOperatorTestsRegistry() (*oteextension.Registry, error) {
 	registry := oteextension.NewRegistry()
 	extension := oteextension.NewExtension("openshift", "payload", "cluster-kube-apiserver-operator")
 
-	// The following suite runs tests that verify the operator’s behaviour.
+	// The following suite runs tests that verify the operator's behaviour.
 	// This suite is executed only on pull requests targeting this repository.
 	// Tests tagged with both [Operator] and [Serial] are included in this suite.
 	extension.AddSuite(oteextension.Suite{

go.mod

@@ -13,6 +13,7 @@ require (
 	github.com/imdario/mergo v0.3.8
 	github.com/miekg/dns v1.1.61
 	github.com/onsi/ginkgo/v2 v2.27.2
+	github.com/onsi/gomega v1.38.2
 	github.com/openshift-eng/openshift-tests-extension v0.0.0-20250804142706-7b3ab438a292
 	github.com/openshift/api v0.0.0-20260317165824-54a3998d81eb
 	github.com/openshift/build-machinery-go v0.0.0-20250530140348-dc5b2804eeee
@@ -37,8 +38,6 @@ require (
 	sigs.k8s.io/kube-storage-version-migrator v0.0.6-0.20230721195810-5c8923c5ff96
 )
 
-require github.com/onsi/gomega v1.38.2
-
 require (
 	cel.dev/expr v0.24.0 // indirect
 	github.com/NYTimes/gziphandler v1.1.1 // indirect